feat: add production host routes

README.md

@@ -18,18 +18,18 @@ Add or edit one file per site under `config/dynamic/`. For example, `config/dyna
 ```yaml
 http:
   routers:
-    lab-younerd-http:
+    lab-yourdomain-http:
       entryPoints:
         - web
-      rule: "Host(`lab.younerd.org`)"
+      rule: "Host(`lab.yourdomain.tld`)"
-      service: lab-younerd-http
+      service: lab-yourdomain-http
 
   services:
-    lab-younerd-http:
+    lab-yourdomain-http:
       loadBalancer:
         healthCheck:
           path: "/"
-          hostname: "lab.younerd.org"
+          hostname: "lab.yourdomain.tld"
           interval: "10s"
           timeout: "3s"
         servers:
@@ -37,16 +37,16 @@ http:
 
 tcp:
   routers:
-    lab-younerd-tls:
+    lab-yourdomain-tls:
       entryPoints:
         - tls
-      rule: "HostSNI(`lab.younerd.org`)"
+      rule: "HostSNI(`lab.yourdomain.tld`)"
-      service: lab-younerd-tls
+      service: lab-yourdomain-tls
       tls:
         passthrough: true
 
   services:
-    lab-younerd-tls:
+    lab-yourdomain-tls:
       loadBalancer:
         healthCheck:
           interval: "10s"
@@ -60,9 +60,8 @@ tcp:
 HTTP-01 certificate challenges use normal HTTP routing on port `80`, not SNI. The included example forwards:
 
 ```text
-lab.younerd.org -> 127.0.0.1:8080
+lab.yourdomain.tld -> 127.0.0.1:8080
-azionelab.org -> 127.0.0.1:9080
+www.yourdomain.tld -> 127.0.0.1:9080
-www.azionelab.org -> 127.0.0.1:9080
 ```
 
 Adjust `8080` and `9080` to the local ports where the backend HTTP service is listening. The full HTTP request is forwarded so the backend can handle redirects and ACME challenge paths.

config/dynamic/alfredodistasio.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    alfredodistasio-http:
+      entryPoints:
+        - web
+      rule: "Host(`alfredodistasio.com`) || Host(`www.alfredodistasio.com`)"
+      service: alfredodistasio-http
+
+  services:
+    alfredodistasio-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "alfredodistasio.com"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:10080"
+
+tcp:
+  routers:
+    alfredodistasio-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`alfredodistasio.com`) || HostSNI(`www.alfredodistasio.com`)"
+      service: alfredodistasio-tls
+      tls:
+        passthrough: true
+
+  services:
+    alfredodistasio-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:10443"

config/dynamic/avernum.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    avernum-http:
+      entryPoints:
+        - web
+      rule: "Host(`avernum.org`) || Host(`www.avernum.org`)"
+      service: avernum-http
+
+  services:
+    avernum-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "avernum.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:11080"
+
+tcp:
+  routers:
+    avernum-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`avernum.org`) || HostSNI(`www.avernum.org`)"
+      service: avernum-tls
+      tls:
+        passthrough: true
+
+  services:
+    avernum-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:11443"

config/dynamic/bc-younerd.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    bc-younerd-http:
+      entryPoints:
+        - web
+      rule: "Host(`bc.younerd.org`) || Host(`www.bc.younerd.org`)"
+      service: bc-younerd-http
+
+  services:
+    bc-younerd-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "bc.younerd.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:12080"
+
+tcp:
+  routers:
+    bc-younerd-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`bc.younerd.org`) || HostSNI(`www.bc.younerd.org`)"
+      service: bc-younerd-tls
+      tls:
+        passthrough: true
+
+  services:
+    bc-younerd-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:12443"

config/dynamic/files-avernum.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    files-avernum-http:
+      entryPoints:
+        - web
+      rule: "Host(`files.avernum.org`)"
+      service: files-avernum-http
+
+  services:
+    files-avernum-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "files.avernum.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:13080"
+
+tcp:
+  routers:
+    files-avernum-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`files.avernum.org`)"
+      service: files-avernum-tls
+      tls:
+        passthrough: true
+
+  services:
+    files-avernum-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:13443"

config/dynamic/git-younerd.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    git-younerd-http:
+      entryPoints:
+        - web
+      rule: "Host(`git.younerd.org`)"
+      service: git-younerd-http
+
+  services:
+    git-younerd-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "git.younerd.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:14080"
+
+tcp:
+  routers:
+    git-younerd-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`git.younerd.org`)"
+      service: git-younerd-tls
+      tls:
+        passthrough: true
+
+  services:
+    git-younerd-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:14443"

config/dynamic/ignoranzartificiale.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    ignoranzartificiale-http:
+      entryPoints:
+        - web
+      rule: "Host(`ignoranzartificiale.org`) || Host(`www.ignoranzartificiale.org`)"
+      service: ignoranzartificiale-http
+
+  services:
+    ignoranzartificiale-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "ignoranzartificiale.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:15080"
+
+tcp:
+  routers:
+    ignoranzartificiale-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`ignoranzartificiale.org`) || HostSNI(`www.ignoranzartificiale.org`)"
+      service: ignoranzartificiale-tls
+      tls:
+        passthrough: true
+
+  services:
+    ignoranzartificiale-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:15443"

config/dynamic/paste-younerd.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    paste-younerd-http:
+      entryPoints:
+        - web
+      rule: "Host(`paste.younerd.org`)"
+      service: paste-younerd-http
+
+  services:
+    paste-younerd-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "paste.younerd.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:16080"
+
+tcp:
+  routers:
+    paste-younerd-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`paste.younerd.org`)"
+      service: paste-younerd-tls
+      tls:
+        passthrough: true
+
+  services:
+    paste-younerd-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:16443"

config/dynamic/static-younerd.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    static-younerd-http:
+      entryPoints:
+        - web
+      rule: "Host(`static.younerd.org`)"
+      service: static-younerd-http
+
+  services:
+    static-younerd-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "static.younerd.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:17080"
+
+tcp:
+  routers:
+    static-younerd-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`static.younerd.org`)"
+      service: static-younerd-tls
+      tls:
+        passthrough: true
+
+  services:
+    static-younerd-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:17443"

config/dynamic/thefiredodo.yml

@@ -0,0 +1,37 @@
+http:
+  routers:
+    thefiredodo-http:
+      entryPoints:
+        - web
+      rule: "Host(`thefiredodo.org`) || Host(`www.thefiredodo.org`)"
+      service: thefiredodo-http
+
+  services:
+    thefiredodo-http:
+      loadBalancer:
+        healthCheck:
+          path: "/"
+          hostname: "thefiredodo.org"
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - url: "http://127.0.0.1:18080"
+
+tcp:
+  routers:
+    thefiredodo-tls:
+      entryPoints:
+        - tls
+      rule: "HostSNI(`thefiredodo.org`) || HostSNI(`www.thefiredodo.org`)"
+      service: thefiredodo-tls
+      tls:
+        passthrough: true
+
+  services:
+    thefiredodo-tls:
+      loadBalancer:
+        healthCheck:
+          interval: "10s"
+          timeout: "3s"
+        servers:
+          - address: "127.0.0.1:18443"